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Abstract. We introduce here a new method for extracting worst-cases of algorithms by using rewrite 
systems over automorphisms groups of inputs. 

We propose a canonical description of an algorithm, that is also related to the problem it solves. The 
description identifies an algorithm with a set of a rewrite systems over the automorphisms groups of inputs. 
All possible execution of the algorithm will then be reduced words of these rewriting system. 
Our main example is reducing two-dimensional Euclidean lattice bases. We deal with the Gaussian algorithm 
that finds shortest vectors in a two-dimensional lattice. We introduce four rewrite systems in the group of 
unimodular matrices, i.e. matrices with integer entries and with determinant equal to ±1 and deduce a new 
worst-case analysis of the algorithm that generalizes Vallee's result [16] to the case of the usual Gaussian 
algorithm. An interesting (but not easy) future application will be lattice reduction in higher dimensions, 
in order to exhibit a tight upper- bound for the number of iterations of LLL-like reduction algorithms in 
the worst case. 

Sorting ordered finite sets are here as a nice esay example to illustrate the purpose of our method. We 
propose several rewrite systems in the group S of permutations and canonically identify a sorting algorithm 
with a rewrite system over S. This brings us to exhibit worst-cases of several sorting algorithms. 



1. Introduction 

A Euclidean lattice is the set of all integer linear combinations of a set of linearly independent vectors in W . 
The independent vectors are called a basis of the lattice. Any lattice can be generated by many bases. All 
of them have the same cardinality, that is called the dimension of the lattice. If B and B' represent matrices 
of two bases of the same lattice in the canonical basis of R^, then there is a unimodular matrix U such that 
B' — UB. A unimodular matrix is a matrix with integer entries and with determinant equal to ±1. 
The lattice basis reduction problem is to find bases with good Euclidean properties, that is, with sufficiently 
short vectors and almost orthogonal. 

In two dimensions, the problem is solved by the Gaussian algorithm, that finds in any two-dimensional 
lattice, a basis formed with the shortest possible vectors. The worst-case complexity of Gauss' algorithm 
(explained originally in the vocabulary of quadratic forms) was first studied by Lagarias [7], who showed 
that the algorithm is polynomial with respect to its input. The worst-case complexity of Gauss' algorithm 
was also studied later more precisely by ValleefTB]. 

In 1982, Lenstra, Lenstra and Lovasz [llj gave a powerful approximation reduction algorithm for lattices 
of arbitrary dimension. Their famous algorithm, called LLL, was an important breakthrough to numerous 
theoretical and practical problems in computational number theory and cryptography: factoring polynomials 
with rational coefhcients [11^ , finding linear Diophantinc approximations [8 , breaking various cryptosystems 
[4] and integer linear programming jSl [9] . The LLL algorithm is a possible generalization of its 2-dimensional 
version, which is the Gaussian algorithm. 

The LLL algorithm seems difficult to analyze precisely, both in the worst-casefH [101 HI] and in average- 
case[3J[2. In particular when the dimension is higher than two, the problem of the real worst-case of the 
algorithm is completely open. However, LLL-like reduction algorithms are so widely used in practice that 
the analyzes are a real challenge, both from a theoretical and practical point of view. 

The purpose of our paper is a new approach to the worst- -case analyze of LLL-like lattice reduction 
algorithms. For the moment this approach is presented only in two dimensions. We have to observe here 
that the worst case of some variant of the Gaussian algorithm is already known [16] . Even if our paper 
generalize this knowledge to the case of the usual Gaussian algorithm, we do not consider it as the most 
important point of this paper. Our aim here is to present this new approach. 
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An LLL-like lattice reduction algorithm uses some (finite) elementary transforms. We consider the group 
generated by these basic transforms. Then we exhibit a family of rewriting rules over this group, corre- 
sponding to the mechanism of the algorithm. The rewriting rules make some forbidden sequences and the 
length of a valid word over the set of generators becomes very close to the number of steps of the algorithm. 
This makes appear the smallest length of input demanding a given number of iterations to the reduction 
algorithm. 

From a combinatorial point of view, the group of n- dimensional lattice transformations GL„(Z), i.e. the 
multiplicative group of n x n matrices with determinant ±1, is the group of automorphisms of the free 
Abelian group on n free generator^. Here we are concerned by GL2(Z), which is is well-known and whose 
presentation in terms of generators and relators is known since the nineteenth century. 
In this paper we present a rewriting system over GL2 (Z) , that makes us predict how the Gaussian algorithm 
is running on an arbitrary input. We deduce from this the worst-case configuration of the usual Gaussian 
algorithm and give an "optimal" maximum for the number of steps of the Gaussian algorithm. Our result 
generalizes the result of Vallee [16]. She studied a variant of the Gaussian algorithm where elementary 
transforms made by the algorithm are some integer matrices of determinant equal to 1. In the case of the 
usual Gaussian algorithm, elementary transforms are integer matrices of determinant either 1 or —1. 
II the following we briefly outline the two steps of our method. 

1.1. First step. Consider a deterministic algorithm A that run on an input x (the data a; is a set X of 
data). Then by mean of elementary transforms taken in a set F C X-^ , the algorithm changes the input 
step by step (x — > f{x) until the modified data satisfies some output condition (x G O (Z X. An elementary 
or atomic transform is a transform that cannot be decomposed by the algorithm: 

fe 

(1.1) V/eF, VfceN,fc>i, V(/i,...,/fe)e (F\{^d})^ /^f]/^ 

1=1 

This is of course a very general context containing both iterative and recursive algorithms. 
Algorithm A : 

Input: X G X. 

Output: y € O. 
Initialization: i := 1; 
While X ^ O do 

Determine an adequate function / G F by a computation on x and eventually on i. 

x:=f(x) 

i:=i+l 

The algorithm A is deterministic. We suppose that the determination of the adequate function / e F at 
a moment i (which may depend on the history of the execution) has a cost that can be added without 
ambiguity to the cost of the function / . Considering F as an alphabet, the set F* of finite words on F is 
then the monoid generated by the set of free generators F. F* contain all (finite) executions of the algorithm. 
Now fix a sequence of transforms (/i, /2, . . . , fk) € F''. 

Is the sequence (/i, /2, . . . , fk) G F'' a possible execution for the algorithm? More precisely, 
is there {x,y) ^ X x Y such that the algorithm A outputs y when running on an input x 
and following the exact sequence of transforms (/i, /2, . . . , /fe)? 

Answering this question in such a general context is very difficult and the general problem (formulated more 
precisely) is likely undecidable. However the answer in restricted class of algorithms bring indeed a strong 
understanding of the mechanism of the algorithm and we believe that it is interesting by its own with lots 
of possible applications in program verifying, or program designing. 

In this paper, we propose a method to answer this question in the case of Gaussian algorthm and three sorting 
algorithms. A set (finite in the case of our examples) of rewriting systems encode all possible executions of 
a given algorithm. All possible executions will be the normal forms (or reduced forms) of these rewriting 
systems. 



By the free Abelian group, we mean that the only non trivial relators (i.e. the additional relators compared to the free 
group) are the commutators. 
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1.2. second step. Usually when counting the number of steps of an algorithm, one considers all inputs of 
length less than a fixed bound, say M. Then one estimates the maximum number of steps taken over all 
these inputs by: 

(1.2) f{M):= max number of steps of the algorithm. 

all inputs of length less than A4 

Here to exhibit the precise real worst-case, we first proceed in "the opposite way" . Consider k a fixed number 
of steps. We will estimate the minimum length of those inputs demanding at least k steps to be processed 
by the algorithm: 

(1.3) g{k) := min length of the input. 

all inputs demanding at least k steps 

Clearly f{g(k)) = k. Otherwise there would be an input of length less than g{k) demanding more than k 
steps. But g{k) is by definition the minimal length of such inputs. So by inverting the fuction g , we can 
compute /. 

2. Gaussian algorithm and the new approach to its worst-case analysis 

Endow with the usual scalar product (, ) and Euclidean length |u| — (u, u)^^^. A two-dimensional lattice 
is a discrete additive subgroup of . Equivalently, it is the set of all integer linear combinations of two 
linearly independent vectors. Generally it is given by one of its bases (bi, b2). Let (ei, 62) be the canonical 
basis of M^. We often associate to a lattice basis (bi,b2) a matrix B, such that the vectors of the basis are 
the rows of the matrix: 

ei e2 
bi / 61,1 &i,2 

2 \^2,l &2,2 

The length L of the previous basis (or the length of the matrix B) is defined here to be the maximum of 
(|bi|,|b2|). 

The usual Gram-Schmidt orthogonalization process builds, in polynomial-time, from a basis b = (bi, b2) an 
orthogonal basis b* = (b^, bj) and a lower-triangular matrix M that expresses the system b into the system 
6*0. Put m = ll^^'^^j . By construction, the following equalities hold: 

hi b^ 

(2-2) I S ^ K '^^-^f' ? 

^ ^ 1^ b2 = b2 - TO bi ' b2 \ m 1 

The ordered basis B = (bi,b2) is called proper if the quantity m satisfies 

(2.3) -l/2<m<l/2. 

There is a natural and unique representative of all the bases of given two-dimensional lattice. This basis is 
composed of two shortest vectors generating the whole lattice. It is called the Gauss- reduced basis and the 
Gaussian algorithm outputs this reduced basis running on any basis of the lattice. Any lattice basis in two 
dimensions can always be expressed as 

(2.4) B = UR, 

where R is the so-called Gaussian reduced basis of the same lattice and [/ is a uniniodular matrix, i.e. an 
element of GL2{'Z). The goal of a reduction algorithm, the Gaussian algorithm in two dimensions, is to find 
R given B. The Gaussian algorithm is using two kinds of elementary transforms, explained in the sequel of 
this paper. Let (61,62) be an input basis of a lattice and the matrix B expressing (61,62) in the canonical 
basis of as specified by (|2.ip . 

The algorithm first makes an integer translation of 62 in the direction of 61 in order to make 62 as short as 
possible. This is done just by computing the integer x nearest to to = (62, 61)/ (61, 61) and replacing 62 by 
62 ~ xbi. Notice that, after this integer translation, the basis (61,62) is proper. 



^When dealing with a non-trivial algorithm / is always an increasing function. 
Of course, b* is generally not a basis for the lattice generated by b. 
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The second elementary transform is just the swap of the vectors bi and &2 in case when after the integer 
translation we have |6i| > I62I. 

The algorithm iterates these transforms, until after the translation, bi remains still smaller than 627 i-e-, 

\bl\<\b2\.^ 

The Gaussian algorithm can also be regarded (especially for the analysis purposes) as an algorithm that 
gives a decomposition of the unimodular matrix U of relation (|2.4|) by means of some basic transforms: 

, . Input: B = U R. 

^ > Output: R = T'"'+^ST'"'ST'"'-^ ...ST^'^ST^'^B; 

where 

(2.6) S^(^^ J) and T = (^| J 

The matrix T corresponds to an integer translation of 62 in the direction of bi by one. Of course, we have: 

T"^ = ^ and T = , for aU x e Z. 

The matrix S represents a swap. Each step of the algorithm is indeed an integer translation followed by a 
swa^ So each step of the Gaussian algorithm is represented by 5r^, x e Z*. 

Writing the output in this way (j2.5p shows not only the output but how precisely the algorithm is working 
since T and S represent the only elementary transforms made during the execution of the Gaussian algorithm. 
So when studying the mechanism of a reduction algorithm in two dimensions and for a fixed reduced basis 
R, the algorithm can be regarded as a decomposition algorithm over GL2 (Z) : 

Input: U£GL2{Z). 
^ ' Output: a decomposition of U, U := T^'^+i ST^* ST^"-^ . . . ST""^ ST^'K 

The integer k denotes the number of steps. Indeed the algorithm terminates [U [71 [1^. In the sequel we will 
prove that the above mechanism does not depend strongly on the reduced basis R. More precisely there are 
exactly 4 rewrite systems, (for all reduced bases of R^) 

The unimodular group in two dimensions GL2 (Z) has been already studied [12j [131 El [E] and it is well- 
known that {S,T} is a possible family of generators for GL2{Z). Of course there are relators associated to 
these generators and there is no unicity of the decomposition of an element of GL2{'Z) in terms of S and 
T. But the Gaussian algorithm gives one precise of these possible decompositions. In the sequel of this 
paper, we will completely characterize this decomposition and we will call it the Gaussian decomposition of 
a unimodular matrix. Roughly speaking, we exhibit forbidden sequences of values for the XiS. 
More precisely, we exhibit in Section [3] a set of rewriting rules that lead to the formulation output by the 
Gaussian algorithm, from any product of matrices involving S and T. The precise characterization of the 
Gaussian decomposition that we give makes appear the slowest manner the length of a unimodular matrix 
can grow with respect to its Gaussian decomposition. More precisely we consider unimodular matrices the 
length of Gaussian decomposition of which is fixed, say k: 

U := T^^+i 5^"=" ST^^-i . . . ST^^ ST^K 

We exhibit in Section [4] the Gaussian word of length k with minimal length. We naturally deduce the 
minimum length g{k) of all inputs demanding at least k steps (Section [SJ. Finally by "inverting" the 
function g we find the maximum number of steps of the Gaussian algorithm. 

3. The Gaussian decomposition of a unimodular matrix 
Let E be a (finite or infinite) set. A word w on E is a finite sequence 
(3.1) aia2...an 

where n is a positive integer, and € E, for alH g {1, . . . , n}. Let E* be the set of finite words on E. We 
introduce for convenience the empty word and we denote it by 1. 



*A priori xi and x^+i in 112.51 1 may be zero so the algorithm may start by a swap or finish by a translation. 



A REWRITE BASED ANALYSIS OF ALGORITHMS 



5 



Consider the alphabet E — {S,T,T^^}. Remember that we call Gaussian decomposition, the expression of 
U output by the Gaussian algorithm. Remember also that, for a given basis i?, there exists a unique couple 
{U, R) such that U and R are output by the Gaussian algorithm while reducing B. 

Lemma 1. Let R = (61,62) be a reduced basis. Then one of the following cases occurs: 

• |6i| < I62I and m ^ -1/2; 

• \bi\ = I62I and m ^ -1/2 

• |6i| < I62I and m = -1/2 

• |6i| = I62I and m = —1/2. 

Now consider a word lo on E, that is, an element of E*, a unimodular matrix U and a reduced basis R. 
We give, in the following subsections, sets of rewriting rules depending on the form of R, such that any word 
in which none of these rewriting rules can be applied is Gaussian. Since the results of these subsections are 
very similar, we only give detailed proofs for Subsection 13 . 1 1 in the appendix. 

3.1. The basis R is such that |6i| < I62I and m 7^ —1/2. Say that w is a reduced word or a reduced 
decomposition of the unimodular matrix U , if a; is a decomposition of U in which no one of the rewriting 
rules of Theorems [1] can be applied. 

Thus, Theorem [1] shows that, for a given reduced basis R such that |6i| < I62I and m ^ —1/2, the Gaussian 
decomposition and a reduced decomposition of a unimodular matrix are the same, which implies that this 
decomposition is unique. 

Theorem 1. Let lui be any decomposition of U in terms of the family of generators {S,T}. The Gaussian 
decomposition of U is obtained from toi by applying repeatedly the following set of rules: 

(3.2) 52 — > 1; 

(3.3) T^T^ — > T'-'+y- 

(3.4) VxgZI, ST^ST^" — >TST~^ST^+^; 

(3.5) Vx e Z;, ST'^ST'' — > T-^ST'^ST^-^; 

1 1 

(3.6) V.T e Z*, Vfc e Z+, STST'-" J| ST^^ — > TST^'-"-^ J| ST'y^; 

i—k i—k 
1 1 

(3.7) Vx G Z*,Vfc G Z+, ST-^ST^Y[STy' — > T-^ST-''+^Y[ST-y\ 

i—k i—k 

The trivial rules ()3.2|) and (|3.3|) have to be applied whenever possible. So any word cui on the alphabet E 
can trivially be written as 

1 

(3.8) + i ■Q^j.a.,^ 

i—k 

with Xi e Z* for 2 <i < k and {xi,Xk+i) G Z^. The integer k is called the length oftoi. Notice that usually 
the length of a word as in ()3.1|) is n, which would corresponds here to 2fc + 1. Here the length is k, which 
correspond to the number of iterations of the algorithm minus 1. 

The proof of Theorem [1] is given in appendix. It consists in the following lemmas: 

• Lemma m where we prove that the rewriting process terminates; 

• Lemma [3l where we prove that any reduced word is also Gaussian; 

• Lemmas |4] and El where we prove that the use of a nontrivial rewriting rules changes a base of the 
lattice in another base of the same lattice. 

Proofs of Theorems [21 13] and m which are given in the following subsections, are very similar. 



'^The length of a word has of course to be distinguished with what we call the length of a unimodular matrix, that is the 
maximum of absolute values of its coefficients. 
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3.2. The basis R is such that = I62I and m 7^ -1/2. 

Theorem 2. Let lji he any decomposition of U in terms of the family of generators {S,T}. The Gaussian 
decomposition of U is obtained from uji by applying repeatedly the set of rules p.2p to p.7p of TheoremUl 
together with the following rules: 

(3.9) Va; E Z* ,yk e Z+, STST'^ [ JISTy- | — > TST-""-^ m 5r-?^' j T; 

\i=k J \i=k ) 

(3.10) Vx G Z*,Vfc G Z+, ST-^ST^ ( n*^^^" I — ' T'^ST-"'+^ ( ]^ ST"^' j T; 

\i=fc / \i=fc / 

(3.11) ifoJi—LoS, thenLuS — > uj; 

(3.12) ifuJi=ujST, then UJ ST ywTST^^. 

3.3. The basis R is such that \hi\ < I&2I and m = —1/2. 

Theorem 3. Let R be a reduced basis and let U be a unimodular matrix, i.e., an element of GL2{1,). Let 
uji be any decomposition of U in terms of the family of generators {5, T}. The Gaussian decomposition of 
U is obtained from lji by applying repeatedly the rules (13. 2|) to (j3.5|) of Theorem Q] until lji is reduced in the 
sense of Theorem]^ Then, if we have lui = uj ST^ S, the following rule applies: 

(3.13) LoST^S — yLuTST-^ST, 
and the rewriting process is over. 

3.4. The basis R is such that \bi\ = I&2I and m = -1/2. 

Theorem 4. Let R be a reduced basis and let U be a unimodular matrix, i.e., an element of GL2{Z) . Let 
uji be any decomposition of U in terms of the family of generators {S,T}. The Gaussian decomposition of 
U is obtained from uji by applying repeatedly Rules (13. 2p to (j3.5p of Theorem [7J together with Rules (j3.9p 
and p.lOp and the following set of rules: 

(3.14) ifoJi—LoS, thenLuS — > cj; 

(3.15) if LUi — Lu ST, thentoST — > loT; 

(3.16) ifuji ^LoST^, then toST^ — > luTST-\ 

4. The length of a unimodular matrix with respect to 
ITS Gaussian decomposition 

Let B = (61, 62) be a basis. The length of B, denoted by £{B), is the sum of the squares of the norms of its 
vectors, that is, i{B) = + |62p- 

The easy but tedious proof of the following theorem is given in the appendix, see Lemmas [6l [71 l8l [9l and [TOl 

Theorem 5. Let R = (&i, 62) be a reduced basis, let k be a positive integer, and let xi, . . . , Xk+i be integers 
such that the word ui — T^'^+i J^J^;. ST^^ is Gaussian. Then the following properties hold: 

(1) if \hi\ < I62I andm>0 then ({cuR) > l{{ST-'^f-^ SR); 

(2) if \hi\ < I62I and -1/2 <m <0 then £{ujR) > t{{ST'^f-^ S R); 

(3) if \bi\ < I&2I and m = -1/2 then £{luR) > t{{ST-'^f~^ ST R); 

(4) if \hi\ = I&2I then e{ujR) > i{{ST-^)>'-^ ST-^ R). 
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5. The maximum number of steps of the Gaussian algorithm 

Theorem 6. Let k > 2 be a fixed integer. There exists an absolute constant A such that input basis 
demanding more than k steps to the Gaussian algorithm has a length greater than A{1 + v^)*^- 

g(fc) > v4(i + V2)^ 

It follows that any input with length less than A{1 + v^)*^ is demanding less than k steps. We deduce the 
following corollary. 

Corollary 1. There is an absolute constant A such that the number of steps of the Gaussian algorithm on 
inputs of length less than M is bounded from above by 

l0g(l + y2) 

6. Sorting algorithms 

Let n be a positive integer, and let [1, . . . , n] be the sorted list of the n first positive integers. Let Sn be 
the set of all permutations on [1, . . . , n], and let S be the set of all permutations on a list of distinct integers 
of variable size. Let us denote by ti the transposition which swaps the elements in positions i and i + 1 in 
the list , for all i £ {1, . . . , n}. Any permutation can be written in terms of the ti-s. Put S„ = {ti, . . . , t„} 
and T, — {ti-. i G W}. Thus S„ (resp. E) is a generating set of Sn (resp. S). 

As in previous sections, any word lo on T, will be denoted as following: 

k 

OJ = ti2 ■ ■ ■ til, — ^ij ; 

where k and ii, . . . , ik are positive integers. 

Definition 1. Let cui = ti-^ti^ ■ ■ - ti^. and uj2 = tj^^tj^ . . . tj^ be words on S. 

(1) The length ofu, denoted by |a;|, is k; 

(2) the distance between ivi and 102, denoted by Dist(a;i, 1^2), is given by mmt-euji,tjeuj2 N ~ j\i 

(3) the maximum (resp. minimum) of wi, denoted by max(a;i) (resp. min(ti;i)), is given by maxt.gijj(i) 
(resp. mint,g„i(j)); 

(4) LOi is an increasing word (resp. decreasing word) whether ip < ip+i (resp. ip > ip+i), for all 
pe 1}; 

(5) LOi is a consecutively increasing word (resp. consecutively decreasing word) whether ij^i — ij — 1 
(resp. ij — ij+i — 1), for all j S {1, . . . ,k~ 1}; 

(6) LOi < LU2 (resp. toi > UJ2) whether wi and UJ2 are increasing (resp. decreasing) words such that 
max(ci;i) < min(a;2) (resp. min(ti;i) > max(cL;2)); 

(7) LOi is minimal on the left in L02i^\ (resp. maximal on the right in lo\U}2) whether lo\ is an increasing 
word such that i\ < ji (resp. ji < ik); 

(8) similarly, coi is minimal on the right in UJ2W1 (resp. maximal on the left in LO1UJ2) whether loi is a 
decreasing word such that ji < ii (resp. ik < Ji). 

It is easy to prove that any word w on E can be uniquely written on the form 

(6.1) LO ^ LLI1UJ2 ■ ■ -tOm, 

where uji is an increasing (resp. decreasing) word maximal on the right and on the left, for all i € {1, . . . , m}. 
We will call (|6.ip the increasing decomposition (resp. decreasing decomposition) of to, and we will denote it 
by [uji, . . . , uj„i] . We define s: E* — > N as the map given by the rule 

s{ll>) — TO, 

where [wi, . . . ,uJm,] is the increasing decomposition of u. Moreover, it is also easy to prove that tOi can be 
uniquely written on the form 

where the w^-s are consecutively increasing (resp. decreasing) and minimal on the left (resp. right), for all 
i € {!,..., to}. The decomposition [w^^, w^^, . . . , ] is called the consecutively increasing decomposition 
(resp. consecutively decreasing decomposition) of uji. 
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6.1. Bubble sort. The basic idea of the bubble sort algorithm is the following: pairs of adjacent values in 
the list to be sorted are compared and interchanged if they are out of order, the process starting from the 
beginning of the list. Thus, list entries 'bubble upward' in the list until they bump into one with a higher 
sort value. 

The algorithm first compares the two first elements of the list and swap them if they are in the wrong 
order. Then, the algorithm compares the second and the third elements of the list and swaps them if 
necessary. The algorithms continues to compare adjacent elements from the beginning to the end of the list. 
This whole process is iterated until no changes are done. 

Let (T be a permutation on [1, . . . , n]. There exists a unique decomposition w of (T on the alphabet S cor- 
responding to the sequence of elementary transforms performed by the bubble sort algorithm on a[l, . . . ,n]. 
We will call it the bubblian decomposition of a. Notice that {uj)~^a = 1. 

,„ 2^ Input: a e S. 

Output: a decomposition of cr, cr := ii . . . tm- 

Definition 2. A word w on S is a bubblian word if it corresponds to a possible execution of the bubble sort 
algorithm. 

Let us define some rewriting rules on S*. In the following equations, i, j and k are arbitrary positive 
integers and w is a word on E: 

(6.3) t,t,-^l; 

(6.4) if Dist(i + 1, w) > 1, then U^i uj ti ti^i — > uti ti^i ti; 

(6.5) if Dist(i + 1, w) > 1 and lo is maximally increasing, then lo ti — > ti lo; 

(6.6) if Dist(j, kuj) > 1 and either i<j<k or k<i<j, then ti tk lo tj — > ti tj tk to. 

Theorem 7. Let a be a permutation and let w € E* be a decomposition of a on E. The bubblian decompo- 
sition of a is obtained from lo by applying repeatedly the rules (|6.3|) to ()6.6p . 

Remark 1. Let uj and w' be words on E. It is well known that a presentation of S on E is the following: 

• ti ti — 1 , 

• ti tj — tj ti , 

• ti ti^i ti — ti+i ti ii+i; 

for all positive integers i, j such that |« — j | = 1. Thus, it is easy to prove that if lo' is obtained from w, then 
to = lo' in S. 

The sketch of the proof of Theorem [7] is very similar to the proof of Theorem [T] and is given in the 
appendix. Notice that we can easily deduce from Theorem T:redbubble the worst-case for the bubble sort 
algorithm. 

6.2. Other iterative sorting algorithms. We also give without proof some rewriting rules for the insertion 
sort algorithm and the selection sort algorithm, see the appendix. 

7. Conclusion 

In this paper we studied the Gaussian algorithm by considering a rewriting system over GL2(Z). We first 
believe that our method should be applied to other variants of the Gaussian algorithm (for example, Gaussian 
algorithm with other norms ^) and for each variant there is an adequate rewriting system over GL2(Z,). 
The most important and interesting continuation to this work is to generalize the approach in higher dimen- 
sions. Even in three dimensions the worst-case configuration of all possible generalization of the Gaussian 
algorithm is completely unknown for the moment. (T7^ has tried without success in 3 dimensions.) Although 
the problem is really difficult, we have already achieved a step, since the LLL algorithm uses the Gaussian 
algorithm as an elementary transform. 

The group of n-dimensional lattice transformations has been studied first by Nielsen p3] {n = 3) and for 
an arbitrary n by Magnus [T^l [13], based on the work of Nielsen [TJ]. Their work should certainly help to 
exhibit such rewriting systems on G'i„(Z) if there exists. 
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This approach may also be an insight to the still open problem of the complexity of the optimal LLL 
algorithm^ [T^ . 

Acknowledgments. The authors are indebted to Brigitte Vallee for drawing their attention to algorithmic 
problems in lattice theory and for regular helpful discussions. 
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Appendix A. The Gaussian decomposition of a unimodular matrix 

In the following proofs, we will essentially use the set of rules p.4|) . (|3.5p . (|3.6p . (|3.7p and apply (|3.2p and 
p.3p implicitly whenever possible. 

So with any initial uji , we always obtain a reduced word after applying a finite number of times the rewriting 
rules. Moreover, no matter in which order the different rewriting rules are used, the same unique reduced 
word - corresponding to a Gaussian word - is always obtained from toi, as proved by the following lemmas. 

Lemma 2. Let lui be a word as in p.8|) . Then the rewriting process always terminate^. 

The proof of Lemma [5] will use the following notations. 

Notation 1. Let k be a nonnegative integer, and let xi, . . . , Xk+i be integers such that X2t . ■ , Xk are nonzero. 
Put wi = T^'^+i llt=i ST""^- We denote by the word T'^'^+i HLi ST"^'. Put 

Si^{i:2<i<k and = 1}; 

5*2 = {i : 2 < i < fc, XiXi-i < and \xi\ = 2}. 

We also put d(tJi) = E^eSiUSs 

Proof. We proceed by induction on the length of uji, and on the sum d = d{uji). The property is trivially 
true whether e {0, 1, 2} and deN. 

Let be a positive integer such that k > 2. Suppose that the property holds for any word of length k. 
Suppose that = fc + 1. The property holds whether d belongs to {0, 1}. Suppose that the property holds 
for any word uj of length fc -I- 1 such that d > d{uj) > 1. Let i be in Si U iS'2. If Xi = 1 (resp. Xi = —1), then 
we use the rule (|3.6|) (resp. (|3.7p ). and the length of uji strictly decreases. Suppose now that Xi ~ 2. Then 
LOi can be written as L02 ST^ ST'^ ST^ uj^, where a; G Z, y G Zl, uj2 and uj^ are words on the alphabet E, 



Of course saying that the rewriting process presented by the previous Theorem always terminates has a priori nothing to 
do with the well-known fact that the Gaussian algorithm always terminates. 
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such that does not end by a 5 and ^3 is either 1 or starts by S. If we use the rule p.4p . then we get the 
word uj[ = UJ2 ST'=+^ ST-^ STy+^ W3. Put d' = d{uj[), and 6 = Y.JeS,L>S2\{^+l,^,^-l} ^^^ice that if x = 0, 
then uoi = ST^ STV uo^, with z e Z. 
Case 1. Suppose that either x = — lory = — 1. 

Then \uj'i \ = k, and the rewriting process terminates. 
Case 2. Suppose that y ^ {—3, —2, —1}. 

• Suppose that x ^ {—2, —1, 1}: then d' ~ d — 1. 

• Suppose that x = —2. Then the following equalities hold: 

uj[ = UJ2 ST~^ ST-^ STy+^ UJ3. 

Thus, we have d' = i + l<d=2i + l + 5. 

• Suppose that x = 1. Then the following equalities hold: 

uji =UJ2 ST^ST^ Sryus; 
uj[ = UJ2 ST^ ST-^ STy+^ UJ3. 
Thus we have d' = i + l<d = 2i + l + S. 
Case 3. Suppose that y = —3. 

• Suppose that x ^ {-2, -1, 1}. Then d'<i-l + d<i + d<d. 

• Suppose that x = —2. Then 

uj[ = UJ2 ST-^ ST-^ ST-^ UJ3. 

Thus d'<2i-l + 6<2i + l + 5<d. 

• Similarly, if x = 1, then the following equalities hold: 

iui =UJ2 ST^ ST^ ST-^cu3 

Thus d'<2i-l + 6<2i + l + 6<d. 
Case 4. Suppose that y = —2. 

• Suppose that x ^ {-2, -1, 1}. Then d'<i-l + S<i + S<d. 

• Suppose that x = —2. Then the following equalities hold: 

uj[ = UJ2 ST-^ ST-^ ST-^ LU3- 

Thus d'<2i-l + S<2i + l + 6<d. 

• Suppose that x = 1. Then the following equalities hold: 

uj[ ^UJ2 ST^ ST-^ST-^UJ3- 
Thus d'<2i-l + 5<2i + l + 5<d. 
By induction hypothesis, the rewriting process always terminates. □ 

Lemma 3. Let B he the matrix of a proper basis (61,62) (see (|2.ip . (|2.2p and (|2.3p ]. Let x G Z* be a non 
zero integer and B := ST^B express the matrix of the basis (61, 62); i-e. 61 is the first row of B and 62 is its 
second row. 

(1) // |x| > 3, then B is still proper. Moreover, 
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• if (61,52) o-fT-d X are both positive or both negative, then B is proper whenever \x\ > 2. 

• if B is reduced, \bi\ < 1^2 1 md ni ^ —1/2, then B is proper for all x G Z. 

(2) // \x\ > 2, then I&2I < \bi\. Moreover, if (61,62) o,nd x are both positive or both negative, it is true 
provided that \x\ > 1. 

(3) // |x| > 2, then inax]|6i|, I62I) > niax(|6i|, I62I). 

(4) // |a;| > 1, then (61, 62) and x are both positive or both negative. 

Proof. The definitions of B, b* and m are given by Relations (|2.ip . (|2.2p and (|2.3p . We liave 61 = 62 + xbi 
and 62 — bi. In tlie sequel we express all the needed quantities in the orthogonal basis 6* . 



(1) We will show that 
Notice that 



(bl,fcl) 
(61,62) 



< 2. 

(61,61) _ (m + x)2|6t|2 + |6*|2 1 



< 



1(61,62)1 \m + x\\bl\^ 

Since ||x| — \m\\ < \m + x\ and |m| < 1/2, when |x| > 3, clearly 2 < |m + a;| and when mx > this 
is still true whenever \x\ > 2. 

(2) We have to show that |6i| < I62 + a;6i|. We notice that 

|62 + a;6i|2 {m + xy\bl\^ + \b*\^ {m + x)^' 

If mx < 0, we have 1 < 1.5 < ||a;| — |m|| < |m + xj. If mx > 0, |to + a;| > 1, Vx > 1. 

(3) From the last point, we know that |6i| < I62 + a;6i|. If I62I < |6i|, we have also I62I < I62 + x6i|. 
(This is true for > 2 or for \x\ > 1 provided that xm > 0. 

Now if I62I > |6i|, since (61,62) is proper, it is indeed Gauss-reduced. So 61 and 62 are the shortest 
vector generating the whole lattice. So for all x ^ 0, [62 + x6i| > 62. 

(4) By definition (61, 62) :— (62 + 2:61, 61) = {x + m)\bl\'^ . Since \m\ < l/2if|a;| > 1, the quantities x + m 
and X have the same sign. 

□ 

Corollary 2. Let wi be a word of the form (|3.8p . Then there is a unique reduced word tu'i corresponding to 
LUi. Moreover, oj'i is a Gaussian word. 

Lemma 4. Let B be a proper basis. Put 

B ST^ ST'' B and B' := (T ST''^ ST'^+^y^B; 

{resp. B -.^ ST-^ ST"" B and B' := (T^^ ST^ ST^'-^y^B). 
Then B' is such that B' — —B. 
Proof. The following equalities hold: 

ST^ ST^ = {^"^^ ^ and T ST-'^ ST''+^ = ^ II 

which concludes the proof. □ 

Lemma 5. Let R be a reduced basis such that m^-\. Put B -.^ ST ST"" uj B (resp. B := ST-^ ST"" uji B ), 
where lo is a word on E of the form (13. 8p . Then the basis B' := [T ST^^^^ lo^)^^ B (resp. B' := 
{T~^ ST^^^^ bj^)^^ B ) is a reduced basis. 

Proof. Notice that: 

ST ST'' =(^^^^ and T ST-'-"-^ = {^""S^ ^ } 

Thus, it is easy to prove that ST ST'' ^TST-""-^ ^ 
The proof of the following easy claim is left to the reader. 
Claim 1. Let y be an integer. Then the following equalities hold: 

-1 0\ g^y ^ g^^y /l 0\ /I 0\ g^y ^ ^^^y / - 1 
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Thus, it is easy to prove by induction on the length of uji that there exists an integer /3 e { — 1, 1} such that 
ST ST^wi = T ST-^-^ oj^ fi ^ . Thus, we have B' = /3 (^^ B, which concludes the proof. □ 

Corollary 3. Let uj^ = r^'=+i n'=fe ST""' &e a non-reduced word, and let R he a reduced basis. If uji B is 
the input of the Gaussian algorithm, then the sequence of elementary transforms made during the execution 
is exactly represented by the reduced word uniquely associated to uji . 

Appendix B. The length of a unimodular matrix with respect to 
ITS Gaussian decomposition 

The easy proof of the following lemma is left to the reader. 
Lemma 6. Let k be a positive integer. There exist nonnegative integers a, (3 and 7 such that: 



(SrY=(;; ^j,(Sr-Y = (-l)'=(_"^ -^l) anda = 2p + ^. 

Lemma 7. Let B be a proper basis, and let x be an integer such that \x\ > 3. Then £{ST^ B) > £{ST'^ B) 
andiiST^'B) > 1{ST-'^B). 

Proof. Put B^ = (hi^^,b2,x) = ST"" B, for aU integer x. Then 

• bi^x — {x + m)bl + b*2; 

• b2,x = bl. 

It is obvious that |62.2;P = |fe2.2p = |&2.-2p- Moreover, we have 

- |6i,2p = [{x + mf - (2 + mfWbW^ - [(x + 2 + 2m){x - > 0, 

and 

- |6i,-2|' = [{x + mf - (m - 2f]\bl\' ^ [(x ~ 2 + 2m){x + 2)]\blf > 0, 
which concludes the proof. □ 

Lemma 8. Let B be a proper basis, let k be a positive integer, let s Cz {I, —1} be an integer, and let x be an 
integer such that \x\ > 3. The following properties hold: 

• ifxis positive, then i{{ST^f ST^ B) > ^((ST^^^fe+i 5) . 

• ifx IS negative, then i{{ST-'^f ST"" B) > l({ST'^'^f+^ B). 

Proof Put {ST'^Y = and (SP-^)'' = (-l)*^ , as in LemmaH Put B = {bi^x,b2,x) = 

{ST^fST^B and B' = [V i,x,h' 2,x)- Then 

• bi^x — {a{x + m) + (3)h\ + ab2, b'l ^ ~ {ot{x + m) — fi)h\ + ablf, 

• Kx = {P{x + m) + 7)6| + I3b*2, b'2,x = i-p{x + to) + j)bl - pb^- 
Suppose that x is positive. Then 

\hi,x? ~ I&1.2P = [{a{x + to) + pf - {a{2 + to) + pY]\bl\^ 

= [a{x - 2){a{x + 2 + 2m) + 2(3)]\b\\'^ > 

and 

Ihxl' - \b2,2\^ = Mx + to) + 7)2 - (/3(2 + to) + 7)2]|6^|2 

= [(3{x - 2){f3{x + 2 + 2to) + 2j)]\bl\^ > 0, 

that is, liiSP^f ST"" B) > i{{ST^f+^ B). Moreover, 

\hi,x? - \b'i,-2? = [{a{x + m) + (Sf - {a{m - 2) - /3)2]|6*|2 

= [a{x - 2 + 2m)(a(a; + 2) + 2/3)]|6^p > 

and 

\b2,x? - \b'2,-2? - mx + m) + 7)2 - - 2) + 7)2]|6*|2 

= [f3{x - 2 + 2m){(3{x + 2) + 27)]|6*i|2 > 0, 
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that is, i{{ST^f ST"" B) > t{{ST-^f+'^ B). The second part of the proof is very similar. □ 

Proofs of Lemmas O and [TO] are very similar to the proof of Lemma [HI 
Lemma 9. Let B he a proper basis and let x he an integer. Then ^(T^ B) > ({B). 

Lemma 10. Let R be a reduced basis, let k be a positive integer, let x and x' be integers. Then 

• ifx>x'>0, then l{{ST'^f ST"' R) > £{{ST'^)'' ST""' R); 

• ifx<x' <0, then l{{ST-'^f ST"" R) > £{{ST-'^f ST""' R). 
Moreover, the following properties hold: 

• ifmis positive, then i{{ST^fSR) > i{{ST-^f SR); 

• ifm IS negative, then t{{ST-^f S R) > l{{ST^ f SR). 

Proof. Proof of Theorem [51 

Notice first that, by Lemma[9l we can suppose that Xk^i — 0. Suppose that fc = 1. Then, by Lemma [TOl 
eiST'^^B) > £{SB). 

Suppose that fc > 1. The variable e will denote an integer in {1,-1}. We construct a sequence luq, wi, 
. . . , ujk such that the following properties hold: 

(1) ojQ = Lj and LJk = (S'T'^2)/c-i5.. 

(2) LVj = (ST^y nti •S'T^N with e € {1, -1} such that {s2)xk-j > 0, for all j G {1, . . . , fc - 1}; 

(3) e{ujj B) < B), for all j G {!,..., fc}. 

Notice that luj may be equal to Wj-i for some j e {1, . . . , fc}. We proceed by induction on an integer j such 
that 1 < j < fc. Put uj' = Hjti^ 'S'T^N B' = uj'B and B = ST^'^B' = luB. By Lemma [71 we know that 
e{B) = £{ST'"'B') > £{ST^'^)B'). Now, either Xk-i is positive and we put ui = ST'^uj', or Xk^i is negative 
and we put uJi = ST~'^uj' , so that wi is Gaussian. 

Let i be an integer in {1, . . . , fc — 2} such that LOj verifies ([2]) and Q. By Lemma[8l it is obvious that we 
can put: 

• ujj+i = (5r2)J+i n^tr^ -ST^- if X is positive; 

• ujj+i = {ST-^y+^ nti ~^ if ^ is negative. 

Suppose now that we constructed ujk-i = {ST''^f-'^ST^\ Then, by Lemma [TOl we can put ujk = 
{ST'^Y'^ S whether m is positive and oj^ = {ST~'^)''~^ S whether m is negative. □ 

Appendix C. The maximum number of steps of the Gaussian algorithm 

Proof. Proof of Theorem [51 

From the last section , we know that the input with the smallest length demanding fc steps is (S'T^)'^ or 
(5r-2-)fe_ Le^. Q gq^a,l to (ST^). The symmetrical matrix Q 

2 1 
1 

has its eigenvalues equal to 1 + a/2 and 1 — ^/2. It can be diagonalized and one deduces that there exist two 
constants a > and /3 > such that all coefficients of Q'^ are expressed in the form 

ail + + pa - V2)^ ^ «(1 + (l + • 

This leads to the lower-bound proposed by the theorem. □ 
Proof. Proof of Corollary [l] □ 

Appendix D. Sorting algorithms 
Lemma 11. The rewriting process always terminates. 
Proof. Let ^ : S* ^ N be the map given by the rule 

H 
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where w = ta^ . . . ta^^^ ■ Let h: S* — > N be the map given by the rule 

h[uj) = ^^(s(cli) — i)(max(cL;) — 
1=1 

where [lji, . . . ,ct;,„] is the increasing decomposition of uj. We proceed here by induction on the nonnegative 
integers /(w) and h{u)). Suppose that /(tj) = 0. Then a = I and the rewriting process is over. Suppose that 
l{uj) = 1 and h(Lo) = 0. Then u = ti and the rewriting process is over. Notice that there exists no word on 
S* such that l{uj) = 1 and h{u!) > 0. 

Suppose now that /(w) = /, that h{uj) = h and that we can apply a rewriting rule. If we apply one of the 
rules (|6.3p or (|6.4p . then we get a word uj' such that < ^(tj). If we apply (|6.5p or (|6.6p . then Z(cj') 
Let [wi, . . . , ujm] be the increasing decomposition of lu. 

Suppose that we can apply (j6.5[) . Then there exists j G {1, . . . ,m — 1} such that min(ti>j+i) = i and 
min(a;j) > i + 1. Put 

UJ = UJl . ■ ■ UJj ti Uj'j^i . . . UJm] 
Lo' = L0\ ... ti UJj Uj'j^i . . . UJm', 

where t^j+i is such that w^+i = tiUj'^^-^^. Then 

h{uj') = h{uj) ~{s{uj) ~ j){msix{uj) - \uj-j\) -{s{uj) - (j + l)){ma,x{uj) - \ujj+i\) 

+ (sH-j)(max(a;)-(|a;,| + l)) 

+ {s{uj) - {] + l))(max(a.) - - 1)) 

= h{uj) -{s{uj)-j) + {s{uj)-{j + l)) 
= h{uj) -1. 

Suppose now that we can apply the rule (j6.6p . Then there exist p, g G {1, . . . , m} and max(a;)} 
such that one of the following cases occurs. 

Case 1. Suppose that i < k < max(a;p). 

Then 

O) = CJl . . . Uj'ptitkUJp . .. Uj'q tj J'q . . . UJm] 
Uj' ^UJl ... Uj'pti tj tk UJp ... Uj'g Uj'^ ... UJm. 

Case 2. Suppose that i — max(a;p) and k — min(u;p+i). 
Then, 

UJ =UJi ... UJpU tk UJp^^ • • ■ tj UJg 
uj' ^UJl ... Uj'pti tj tk Uj'p^-^ ■■■ ^'q 

Thus, 

h(uj') ~ h{uj) — (s(aj) — p)(max(a;) — Iwpl) — (s((jj) — q)(max((jj) — |a>g|) 

+ {s{u}) - p){max{uj) - {\ujp\ + 1)) 

+ (s{uj) - g)(max(w) - {\ujy\ - 1)) 
= h{ui) -{s{ui) - p) + {s{uj) - q) 
= +p - q, 

which concludes the proof. □ 
Lemma 12. Let uj be a reduced word, and let [uji^ . . . ,ujm] be its increasing decomposition. Let p G 



UJm', 
UJm- 



{1, . . . , m — 1} be an integer. If ti is in Wp+i, then ti^i is in ujp. 

Proof. Let p G {1, . . . , ni} be such that the property does not hold. Let i G {1, . . . , max(aj)} be the smallest 
integer such that ti G i-jp+i, and ti^i ^ ujp. Then, there exists uj'^, uj'^, ^p+i, ^^p+i € such that 

UJ = UJl . . . Uj'pUj'p Uj'p^i ti tJp^i ■ . . UJm] 

and such that the following inequalities hold: 

max(a;p) < i + 1 < min(a;p); 
max(a;p^;^) < i < min((jjp_|_;^); 
Dist{t„uj'^) > 1. 
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Case 1. Suppose that i = min(cjp+i). 

Then uj'pj^i — 1, Lo'^ is maximal on the left and we can apply the rule (|6.5p . 
Case 2. Suppose that i ^ min(Ljp+i) and that G ^p+i- 

Since ti G Up and Dist(ti,Wp) > 1, we can apply the rule (|6.4p . 

Case 3. Suppose that i ^ min(cjp+i) and that ^ t^p+i- 

Then 'D\si{ti,ijjpijj'p^i) > 1. Thus, either Up ^ 1 and we can apply the rule (|6.5p . or 7^ 1 and we can 
apply the rule (|6.6p . □ 

The following corollary is an easy consequence of Lemma 1121 

Corollary 4. Let to be a reduced word, and let [uji , . . . , LUm] be its increasing decomposition. Let p G 
{1, . . . , m — 1} be an integer. Then 

(1) max(a;p) > max(a;p+i); 

(2) Dist(wp, Wp+i) < 1. 

The easy but tedious proof of the following lemma is left to the reader, who can proceed by induction. 

Lemma 13. Let uj — uJi . . .ujm be a permutation put under increasing decomposition. Put lu[1, . . .,n\ = 
[ai, . . . , a„] and uji — Y[k=i ■ ■ ■ tik+piH- Suppose that lo is reduced. Then the following properties hold: 

(1) ai < a2 < ■ ■ ■ < ai^; 

(2) (y-ik = niax{ai, Q!2, . . . , ckifc+pfc}; 

(3) < ai^+p^+i < < • • • < a^^_^_^; 

for all k G {1, . . . , g}. 

Corollary 5. Ln the conditions of Lemma \TS[ the first iterations of the algorithm on lu[1, . . . , n] are repre- 
sented by uJi . 

The following corollary is an easy consequence of Lemma [T3l 

Corollary 6. Let uj be a reduced word. Then lo is a bubblian word. 

Since the bubblian word associated to a given permutation is unique and the rewriting process terminates, 
the bubblian words are the reduced words. 

D.l. Insertion sort. The basic idea of the insertion sort algorithm is the following: the beginning of the list 
being already sorted, the first non sorted element of the list is put at the right place in the already sorted part. 
Thus, an elementary transform made by the algorithm is a cycle {i,i + I, . . . ,i + p) = ti^p i^+p-i . . . i^+i tj 
in S. Thus, any permutation a can be written on the form 

m m 

^ = II (*p' ■ ■ ■ '*p + 9p) = II K+Qp ■ ■ ■ 
p—i p—i 

and the word on E* produced by the algorithm, which we will call insertion word, is a particular decompo- 
sition of a. Let w be a word on a* . The rewriting rules for the insertion sort algorithm are very similar to 
the rewriting rules for the bubble sort algorithm. In the following equations, i, j and k are arbitrary positive 
integers and w is a word on E: 

(D.l) if Dist(i,cj) > 1, then tiUtti — > uj; 

(D.2) if Dist(i + 1, a;) > 1, then ij+i ti+i > titi^itiuj; 

(D.3) if Dist(i + 1, w) > 1, then tij^i ujti — > ojti^i ti, 

(D.4) if j — « > 1, then tj^i tj ti — > fj+i ti tj. 



Let be a word on a*. Using similar methods that in Subsection 16. 1[ we can prove that, by applying 
repeatedly rules [D?l1 to ID.41 we obtain the insertion word uniquely associated to to. 



Ofc— 1 ^ik+Pk ^^'^ consecutively increasing decomposition of uJi. 
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D.2. Selection sort. The basic idea of the selection sort algorithm is the following: the beginning of the 
list being already sorted, the algorithm finds the smallest element of the non sorted list and put it at the 
right place at the end of the already sorted part. As in the previous subsection, an elementary transform 
made by the algorithm is a cycle + 1, . . . ,i + p), which can be written as ti+p ti+p-i . . . U+i ti in S*. 
The word on E* produced by the algorithm, called selection word, is a particular decomposition of a. 

Let a; be a word on a* . The rewriting rules for the selection sort algorithm are very similar to the rewriting 
rules for the bubble sort algorithm. In the following equations, i, j and k are arbitrary positive integers and 
Lu is a word on S: 

(D.5) if Dist(i,[x)) > 1, then tiUjti — > u; 

(D.6) if Dist(z, w) > 1, then ti uj tij^i ti — > lu ti^ititi-^-i; 

(D.7) if Dist(i,a;) > 1, then ti-^-iUjti — > ti^itiUj; 

(D.8) if i — J > 1, then ti tj tj_i — > tj ti tj_i. 

Let cij be a word on a*. Using similar methods that in Subsection 16.11 we can prove that, by applying 
repeatedly rules \DA\ to ID.41 we can obtain the insertion word uniquely associated to ui. 
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